Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: 6DDMB8rIvs32r6gHNUoWnlfRmPpQaOH+paTnpbqiO0M=
Subject key identifier: A5:0A:65:11:01:F1:E4:90:D3:7D:2D:4C:DC:BA:61:45:4B:07:1A:42
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019D99624789842E32A8C7E18B99D4ACB6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 078D
Signing time: Fri 17 Apr 2026 03:00:48 +0000
Manifest this update: Fri 17 Apr 2026 03:00:48 +0000
Manifest next update: Sat 18 Apr 2026 03:00:48 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: u2lEpvvfE5SNj6jMT6UL5PzZdSUPMi6PYj8Z3qxRFF0=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:47:89:84:2e:32:a8:c7:e1:8b:99:d4:ac:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Apr 17 03:00:48 2026 GMT
Not After : Apr 18 03:00:48 2026 GMT
Subject: CN=a50a651101f1e490d37d2d4cdcba61454b071a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:2c:d4:39:70:ee:3f:18:70:ac:c5:41:63:
ff:2e:c8:a3:37:1e:3b:eb:6c:84:79:49:3e:39:af:
f9:6a:91:c5:63:1a:73:e7:46:84:df:0d:8c:d9:48:
78:ae:07:67:cf:35:19:3a:d9:e8:4d:e1:c0:22:7f:
c0:98:5a:ee:85:d3:d4:64:4e:ba:ef:a4:0d:77:d0:
e9:21:42:ef:0f:a4:0e:54:0a:34:eb:40:8e:65:e9:
12:39:64:ca:6f:50:c6:a0:94:97:88:e3:91:e8:ed:
f7:d8:18:f4:0a:78:2f:d0:f5:7e:e8:97:1a:e0:23:
23:4d:e0:9b:b7:4d:04:5e:48:ea:ae:98:89:e7:c4:
12:ac:76:96:aa:b5:c4:38:e2:4b:13:c4:16:5e:bc:
3d:0e:07:70:a9:e8:65:93:a5:63:ea:85:8f:6c:73:
f1:35:8a:af:65:bc:cd:0d:96:c8:5f:9a:8a:eb:3b:
f0:6c:d7:de:c6:3e:de:15:86:93:c4:36:5c:f6:67:
b3:30:23:86:5c:b3:d0:92:aa:c1:52:20:fd:35:0a:
19:78:fa:f2:28:46:a5:83:cc:34:f7:30:a1:7c:6b:
6b:13:56:55:a4:da:eb:b2:8d:2c:73:15:ee:d6:93:
fe:bc:bb:41:df:71:0c:c5:a7:72:43:35:3e:8d:c6:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:65:11:01:F1:E4:90:D3:7D:2D:4C:DC:BA:61:45:4B:07:1A:42
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:86:88:23:9c:1f:9c:71:cd:53:9f:69:8b:62:1a:ab:8f:
2d:47:0f:9d:a0:25:c8:2a:97:da:f8:6e:32:d8:7f:1b:de:2b:
5e:da:f2:cd:69:43:0e:83:de:57:6f:4e:06:89:e4:68:ce:ae:
8b:ff:ce:16:42:c7:b7:4b:aa:32:c6:af:2f:e9:91:ff:78:19:
60:7f:52:2e:03:10:b1:8e:9e:a9:42:b2:cb:08:f2:69:3c:6a:
fe:ed:7f:c6:c0:ac:f1:f3:af:41:da:89:04:5b:ca:8e:d9:77:
d5:33:ab:52:bd:d0:7b:fa:97:4e:87:f0:12:a7:ff:51:07:04:
ff:11:62:59:41:4a:7e:b3:b2:5c:b9:cd:ae:c0:4b:ad:86:f2:
6f:ac:2e:0b:de:18:52:96:73:f4:36:7d:44:bf:a6:b5:9e:5c:
14:8c:33:d9:f5:c1:c0:b9:a3:26:58:d6:33:b1:3b:7a:c4:da:
c5:b6:53:5f:92:6c:ea:51:7e:f0:fb:a8:43:5d:24:0b:4e:0a:
21:5c:fa:b7:ea:fd:79:c0:88:d8:c5:b7:16:5c:e7:0b:e4:f3:
ef:ee:08:a6:a8:26:eb:ed:51:8e:3c:75:1f:5c:e6:8a:54:81:
97:90:91:97:26:e0:5d:13:49:d1:5b:9c:ed:b1:9d:42:48:9c:
1a:a1:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:09 2026 by rpki-client